1. Scope
This Policy applies to data processed through animalpersonalityquiz.com and related subdomains, including account sign-in, team and employer features, quizzes taken through invitations, and optional lead forms. Some experiences (for example, casual quizzes) may be available with limited or no account data; what we process depends on what you choose to use.
2. Categories of personal data we process
Depending on how you use the Service, we may process the following:
- Account and authentication
- Email address and optional name
- Optional timezone for digest-style notifications
- Session identifiers (cookies or similar) for magic-link sign-in
- Internal user identifiers
- Organization and billing (team plans)
- Organization or workspace name
- Optional public slug
- Optional logo (stored as a URL after upload to our media host)
- Subscription or credit records (credits purchased, amounts in our database, Gumroad sale identifiers where applicable)
- Team roster and invitations
- Names and email addresses of people you add as team members
- Optional team labels
- Invitation metadata (email vs invite link), timestamps, and whether a credit was consumed for a result
- Quiz responses and results
- Answers (including question text snapshots and selected options)
- Derived trait scores and assigned animal or archetype
- Related metadata (for example, completion time)
- Generated team reports
- Text summaries stored after generating insights from aggregated quiz data (for example, counts per animal type)
- Share links
- Cryptographic tokens for read-only access to team report views you choose to share
- Lead or interest forms
- Name and email if you submit them where we collect business or team interest
- Administrative and security
- Internal roles or flags (for example, administrator accounts)
- Server and application logs that may include IP addresses or user agents when requests reach our hosting or email infrastructure
We do not use your quiz answers to make automated decisions with legal or similarly significant effects under EU-style definitions, and we do not sell your personal data as a business model.
3. Purposes and legal bases
We process personal data to:
- Provide the Service (contract performance / steps prior to contract): accounts, sign-in emails, team features, quizzes, reports, and customer support.
- Secure and improve the Service (legitimate interests): abuse prevention, debugging, analytics described below, and product improvement, balanced against your rights.
- Comply with law (legal obligation): where applicable tax, accounting, or regulatory duties apply.
- Communications you expect: for example, magic-link emails, invitations, reminders, and transactional notices related to your use of the Service.
Where consent is required (for example, for certain marketing communications not covered by this Policy), we will ask separately.
4. Subprocessors and third-party services
We rely on third-party providers who process data on our behalf or receive data when you use the Service. They may process data in the European Economic Area, the United States, Serbia, or other countries, subject to their own terms and safeguards.
- Hosting and analytics: Vercel Inc. hosts the application and provides Vercel Analytics, which collects aggregate usage and performance metrics. See Vercel's Privacy Policy.
- Database: application data is stored in Bunny.net's managed LibSQL-compatible database (hosted database on Bunny's infrastructure—the same provider as Bunny CDN). See Bunny.net's Privacy Policy.
- Transactional email: Resend delivers sign-in links, invitations, and operational notifications. Email addresses and message metadata are processed by Resend when we send mail. See Resend's Privacy Policy.
- Payments: paid credit packs are processed by Gumroad, a merchant of record. When you purchase on Gumroad, you provide payment details to Gumroad, not to us. We receive purchase notifications (for example, to associate credits with a user account by email) and store limited purchase metadata in our database. See Gumroad's Privacy Policy.
- Media hosting: optional company logos may be uploaded to Bunny CDN (Bunny.net) storage, separate from the database above.
- AI-generated team insights: when a team admin requests generated team report text, we send aggregated statistics (such as counts of completed quizzes per animal type) to Groq (or another configured AI provider) to produce text. We do not need to send participant names to generate that summary. Output is stored in our database for display in the product. See Groq's privacy documentation for how they process API requests.
This list reflects the current stack; if we add or replace a processor, we will update this Policy and, where required, notify you.
5. Cookies and similar technologies
We use cookies and similar storage for authentication sessions and security. Vercel Analytics may use cookies or local storage as described in Vercel's documentation. You can control cookies through your browser settings; disabling essential cookies may prevent sign-in.
6. Retention
We retain personal data only as long as needed for the purposes above, including providing the Service, resolving disputes, and meeting legal, security, and accounting requirements. Exact periods depend on the type of data and your use of the Service. When data is no longer needed, we delete or anonymize it where feasible, unless a longer period is required by law.
7. Sharing
We do not sell your personal data. We share data with subprocessors listed above, and when required by law (for example, lawful requests from public authorities). Team members' results may be visible to administrators of the same organization and to anyone with a share link you create.
8. International transfers
If data is transferred outside Serbia, we rely on appropriate safeguards where required (such as standard contractual clauses or equivalent mechanisms offered by providers) and on your use of global services that inherently involve cross-border processing.
9. Your rights
Depending on applicable law (including Serbia's Law on Personal Data Protection and, where relevant, the GDPR for persons in the EEA or UK), you may have the right to:
- access your personal data;
- rectify inaccurate data;
- request erasure or restriction in certain cases;
- object to processing based on legitimate interests;
- lodge a complaint with a supervisory authority.
In Serbia, you may contact the Commissioner for Information of Public Importance and Personal Data Protection. To exercise rights toward us, email hi@animalpersonalityquiz.com. We may need to verify your identity before responding.
10. Security
We implement reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
11. Children
The Service is not intended for children under 16. If you believe we have collected data from a child without appropriate authority, please contact us and we will take appropriate steps.
12. Changes
We may update this Policy from time to time. The "Last updated" date will change when we do. Material changes may be communicated via the Service or email where appropriate.
13. Contact
Operator: individual based in the Republic of Serbia, operating Animal Personality Quiz. Email: hi@animalpersonalityquiz.com. For privacy requests, include "Privacy" in the subject line.
Terms of Use apply to use of the Service.